Optimising IT Security Research via a Low Cost, Instantly Available, Cloud Based Cyber Range

Wake, Patrick; Black, Sue; Young, Jonathan

Abstract

Testing the effectiveness of IT security measures for enterprises, companies, and institutions can often incur substantial costs in terms of time and resources. These costs encompass not only the investment in infrastructure for creating a cyber range but also the significant time and effort required to set up and configure the test environment. Similarly, academic researchers investigating IT security may find themselves dedicating as much time to preparing the test environment as they do to conducting the actual experiments. To address these challenges, this paper proposes a blueprint for a cyber range designed to replicate the IT environment of small and medium-sized enterprises (SMEs) while incorporating the security provisions mandated by the Cyber Essentials standard. By leveraging cloud technology, enterprises and researchers can effortlessly create multiple instances of the cyber range in minutes, enabling them to focus on experimentation within a repeatable environment. Implemented within the SkyTap platform, the cyber range utilizes a private network segmented into multiple VLANs and supports various technologies and operating systems. Deployment of the cyber range is streamlined and repeatable, allowing users to initiate the process with a simple click. Additionally, a sharing portal can be generated to provide specific access to ethical hackers or penetration testers for collaborative testing. This blueprint has demonstrated its effectiveness, enabling our research group to establish multiple identical cyber ranges. These ranges were subsequently subjected to rigorous testing by ethical hackers to evaluate the efficacy of the implemented IT security provisions. The insights gained from this experimentation hold significant value for advancing research into the effectiveness of Cyber Essentials.

Citation

Wake, P., Black, S., & Young, J. (2024, July). Optimising IT Security Research via a Low Cost, Instantly Available, Cloud Based Cyber Range. Presented at 2024 International Conference on Electrical, Computer and Energy Technologies (ICECET), Sydney, Australia

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2024 International Conference on Electrical, Computer and Energy Technologies (ICECET)
• Start Date: Jul 25, 2024
• End Date: Jul 27, 2024
• Acceptance Date: Jun 30, 2024
• Online Publication Date: Jul 25, 2024
• Publication Date: Jul 25, 2024
• Deposit Date: Dec 9, 2024
• Publicly Available Date: Dec 10, 2024
• Peer Reviewed: Peer Reviewed
• Pages: 1-8
• DOI: https://doi.org/10.1109/icecet61485.2024.10698747
• Keywords: Ethics, Costs, Computer hacking, Malware, Time measurement, Scheduling, Security, Protection, Standards, Testing
• Public URL: https://durham-repository.worktribe.com/output/3211931